WHAT IS CLAIMED IS: 



1 1. A method, comprising: 

2 receiving a message having an associated token, wherein the token is 

3 associated with a subject; 

4 obtaining a first claim from the token, wherein the claim comprises a 

5 statement about the subject; and 

6 selectively mapping the first claim to a second claim. 

1 2. The method of claim 1, further comprising obtaining another claim 

2 from the token. 

1 3. The method of claim 1, further comprising rejecting the message as 

2 a function of the first claim. 

1 4. The method of claim 1, further comprising rejecting the message as 

2 a function of the second claim. 

1 5. The method of claim 1, further comprising forming a claim 

2 collection that includes the first and second claims. 

1 6. The method of claim 1, further comprising obtaining a resource 

2 identifier from the message. 
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1 7. The method of claim 6, wherein obtaining the resource from the 

2 message comprises applying an XPath expression. 

1 8. The method of claim 6, wherein the resource identifier comprises a 

2 property of the message. 

1 9. The method of claim 1, further comprising obtaining a resource 

2 identifier from a computing system performing the method. 

1 10. The method of claim 9, wherein the resource identifier comprises a 

2 property of the computing system's runtime environment. 

1 11. The method of claim 9, wherein a resource corresponding to the 

2 resource identifier is stored by the computing system. 

1 12. The method of claim 1 5 further comprising sending a return message 

2 to a sender of the message, wherein the return message includes information regarding 

3 the second claim. 

1 13. The method of claim 12, wherein the information regarding the 

2 second claim comprises the second claim. 

1 14. The method of claim 1, further comprising obtaining a third claim 

2 from the first claim. 
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1 15. The method of claim 1, further comprising obtaining a third claim 

2 from the second claim. 

1 16. The method of claim 1, further comprising selectively rejecting the 

2 first claim. 

1 17. The method of claim 1, wherein the token is received out-of-band 

2 from the message. 

1 18. The method of claim 1, fiirther comprising sending the message, the 

2 token and a second token to another entity, wherein the second token includes 

3 information related to the second claim. 

1 19. A machine readable medium having instructions for performing the 

2 method of claim 1 . 

1 20. A system comprising: 

2 a first module to obtaining a first claim from a token associated with a 

3 message, wherein the message has an associated subject and the claim comprises a 

4 statement related to the subject; and 

5 a second module to selectively map the first claim to a second claim. 

1 21. The system of claim 20 further comprising a third module to 

2 determine as a function of the first claim whether the message is to be rejected. 
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1 22. The system of claim 20, further comprising a third module to 

2 determine as a function of the second claim whether the message is to be rejected. 

1 23. The system of claim 20, further comprising a module to form a claim 

2 collection that includes the first and second claims. 

1 24. The system of claim 20, further comprising a module to selectively 

2 obtain a resource identifier from the message. 

1 25. The system of claim 24, wherein the module to obtain the resource 

2 identifier from the message is to selectively apply an XPath expression to obtain the 

3 resource identifier. 

1 26. The system of claim 24, wherein the resource identifier comprises a 

2 property of the message. 

1 27. The system of claim 20, further comprising a module to selectively 

2 obtain a resource identifier from a computing system in which the first and second 

3 modules reside. 

1 28. The system of claim 27, wherein the resource identifier comprises a 

2 property of the computing system's runtime environment. 
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1 29. The method of claim 27, wherein a resource corresponding to the 

2 resource identifier is stored by the computing system. 

1 30. The system of claim 20, further comprising a module to selectively 

2 send a return message to a sender of the message, wherein the return message includes 

3 information regarding the second claim. 

1 31. The system of claim 30, wherein the information regarding the 

2 second claim comprises the second claim. 

1 32. The system of claim 20, wherein the second module is to selectively 

2 obtain a third claim from the first claim. 

1 33. The system of claim 20, wherein the second module is to selectively 

2 obtain a third claim from the second claim. 

1 34. The system of claim 20, wherein the second module is to selectively 

2 reject the first claim. 

1 35. The system of claim 20, wherein the first module is to receive the 

2 token out-of-band from the message. 



23 



1 36. The system of claim 20, further comprising a module to send the 

2 message, the token and a second token to another entity, wherein the second token 

3 includes information related to the second claim. 

1 37. A machine readable medium having the modules recited in claim 20. 

1 38. A machine-readable medium having components, comprising: 

2 means for receiving a message having an associated token, wherein the 

3 token is associated with a subject; 

4 means for obtaining a first claim from the token, wherein the claim 

5 comprises a statement about the subject; and 

6 means for selectively mapping the first claim to a second claim. 

1 39. The machine-readable medium of claim 38, further comprising 

2 means for rejecting the message as a function of the first claim. 

1 40. The machine-readable medium of claim 38, further comprising 

2 means for rejecting the message as a function of the second claim. 

1 41. The machine-readable medium of claim 38, further comprising 

2 means for obtaining a resource identifier from the message. 
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1 42. The machine-readable medium of claim 38, further comprising 

2 means for obtaining a resource from a computing system reading the machine-readable 

3 medium. 

1 43. The machine-readable medium of claim 38, further comprising 

2 means for sending a return message to a sender of the message, wherein the return 

3 message includes information regarding the second claim. 

1 44. The machine-readable medium of claim 38, further comprising 

2 means for obtaining a third claim from the first claim. 

1 45. The machine-readable medium of claim 44, further comprising 

2 means for rejecting the message as a function of the third claim. 

1 46. The machine-readable medium of claim 38, further comprising 

2 means for obtaining a third claim from the second claim. 

1 47. The machine-readable medium of claim 38, further comprising 

2 means for selectively rejecting the first claim. 

1 48. The machine-readable medium of claim 38, further comprising 

2 means for sending the message, the token and a second token to another entity, wherein 

3 the second token includes information related to the second claim. 
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